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1 . A method for digital content access control, comprising: 

determining a digital content specification and associated authenticated rights locker 
access request; 

sending said authenticated rights locker access request and said digital content 
specification; 

receiving a new authenticated rights locker access request and a Web page with one 
or more clickable links in response to said sending, at least one of said one or 
more clickable links associated with an authenticated digital content request; 

receiving an indication of a user selection of one of said one or more clickable links; 

sending an authenticated digital content request associated with said one of said one 
or more clickable links to a digital content repository; and 

receiving said digital content in response to said sending said authenticated digital 
content request. 



2. The method of claim 1 wherein 

said method further comprises determining one or more delivery parameters, said 

one or more delivery parameters indicating where said digital content should be 

sent, a delivery mechanism, or both; and 
said sending further comprises sending said one or more delivery parameters. 
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The method of claim 1, further comprising storing at least part of said new 
authenticated rights locker access request in a bookmark on a user device. 



4. The method of claim 1 wherein said new authenticated rights locker access request is 
embedded in a Web cookie. 

5. The method of claim 1 wherein said new authenticated rights locker access request is 
encapsulated in an HTTP Response message. 

6. A method for digital content access control, comprising: 

receiving an authenticated rights locker access request and a digital content 
specification; 

validating said authenticated rights locker access request; and 
if said validating indicates said authenticated rights locker access request is valid, 
creating a Web page with one or more clickable links that comprise an 

authenticated digital content request for use in accessing digital content 
stored by a digital content repository; and 
sending a new authenticated rights locker access request and said Web page. 

7. The method of claim 6 wherein at least part of said new authenticated rights locker 
access request is for storage in a bookmark on a user device. 
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The method of claim 6, further comprising embedding said new authenticated rights 
locker access request in a Web cookie before said sending. 



9. The method of claim 6, further comprising encapsulating said new authenticated 
rights locker access request in an HTTP Response message before said sending. 

10. A method for digital content access control, comprising: 

determining a digital content specification and associated authenticated rights locker 
access request; 

sending said authenticated rights locker access request and said digital content 
specification; 

receiving a new authenticated rights locker access request and a Web page with one 
or more clickable links in response to said sending, at least one of said one or 
more clickable links associated with an authenticated digital content request; 

receiving an indication of a user selection of one of said one or more clickable links; 

sending said new authenticated rights locker access request and an indication of the 
right associated with said one of said one or more clickable links to a rights 
locker provider; and 

receiving said digital content in response to said sending said new authenticated 
rights locker access request. 

11. The method of claim 10 wherein 
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said method further comprises determining one or more delivery parameters, said 
one or more delivery parameters indicating where said digital content should be 
sent, a delivery mechanism, or both; and 

said sending further comprises sending said one or more delivery parameters. 

12. The method of claim 10, further comprising storing at least part of said new 
authenticated rights locker access request in a bookmark on a user device. 

13. The method of claim 10 wherein said new authenticated rights locker access request 
is embedded in a Web cookie. 

14. The method of claim 10 wherein said new authenticated rights locker access request 
is encapsulated in an HTTP Response message. 

15. A method for digital content access control, comprising: 

receiving a first authenticated rights locker access request and a digital content 
specification; 

validating said first authenticated rights locker access request; and 
if said validating indicates said first authenticated rights locker access request is 
valid, 

creating a Web page with one or more clickable links that comprise an 

authenticated digital content request for use in accessing digital content 
stored by a digital content repository; 



123 



EV 263 600 956 Docket No. SUN-040203 

sending a second authenticated rights locker access request and said Web page; 
receiving and validating said second authenticated rights locker access request; 
obtaining an authenticated digital content request if said second authenticated 

rights locker access request is valid; and 
sending said authenticated digital content request to a digital content repository. 

16. The method of claim 15 wherein at least part of said second authenticated rights 
locker access request is for storage in a bookmark on a user device. 

17. The method of claim 15, further comprising embedding said second authenticated 
rights locker access request in a Web cookie before said sending. 

18. The method of claim 15, further comprising encapsulating said second authenticated 
rights locker access request in an HTTP Response message before said sending. 

19. A program storage device readable by a machine, embodying a program of 
instructions executable by the machine to perform a method for digital content 
access control, the method comprising: 

determining a digital content specification and associated authenticated rights locker 
access request; 

sending said authenticated rights locker access request and said digital content 
specification; 
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receiving a new authenticated rights locker access request and a Web page with one 
or more clickable links in response to said sending, at least one of said one or 
more clickable links associated with an authenticated digital content request; 

receiving an indication of a user selection of one of said one or more clickable links; 

sending an authenticated digital content request associated with said one of said one 
or more clickable links to a digital content repository; and 

receiving said digital content in response to said sending said authenticated digital 
content request. 

20. The program storage device of claim 19 wherein 

said method further comprises determining one or more delivery parameters, said 
one or more delivery parameters indicating where said digital content should be 
sent, a delivery mechanism, or both; and 

said sending further comprises sending said one or more delivery parameters. 

21. The program storage device of claim 19, said method further comprising storing at 
least part of said new authenticated rights locker access request in a bookmark on a 
user device. 

22. The program storage device of claim 19 wherein said new authenticated rights locker 
access request is embedded in a Web cookie. 
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The program storage device of claim 19 wherein said new authenticated rights locker 
access request is encapsulated in an HTTP Response message. 



24. A program storage device readable by a machine, embodying a program of 
instructions executable by the machine to perform a method for digital content 
access control, the method comprising: 

receiving an authenticated rights locker access request and a digital content 
specification; 

validating said authenticated rights locker access request; and 
if said validating indicates said authenticated rights locker access request is valid, 
creating a Web page with one or more clickable links that comprise an 

authenticated digital content request for use in accessing digital content 
stored by a digital content repository; and 
sending a new authenticated rights locker access request and said Web page. 

25. The program storage device of claim 24 wherein at least part of said new 
authenticated rights locker access request is for storage in a bookmark on a user 
device. 

26. The program storage device of claim 24, said method further comprising embedding 
said new authenticated rights locker access request in a Web cookie before said 
sending. 
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27. The program storage device of claim 24, said method further comprising 
encapsulating said new authenticated rights locker access request in an HTTP 
Response message before said sending. 

28. A program storage device readable by a machine, embodying a program of 
instructions executable by the machine to perform a method for digital content 
access control, the method comprising: 

determining a digital content specification and associated authenticated rights locker 
access request; 

sending said authenticated rights locker access request and said digital content 
specification; 

receiving a new authenticated rights locker access request and a Web page with one 
or more clickable links in response to said sending, at least one of said one or 
more clickable links associated with an authenticated digital content request; 

receiving an indication of a user selection of one of said one or more clickable links; 

sending said new authenticated rights locker access request and an indication of the 
right associated with said one of said one or more clickable links to a rights 
locker provider; and 

receiving said digital content in response to said sending said new authenticated 
rights locker access request. 

29. The program storage device of claim 28 wherein 
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said method further comprises determining one or more delivery parameters, said 
one or more delivery parameters indicating where said digital content should be 
sent, a delivery mechanism, or both; and 

said sending further comprises sending said one or more delivery parameters. 

30. The program storage device of claim 28, said method further comprising storing at 
least part of said new authenticated rights locker access request in a bookmark on a 
user device. 

31. The program storage device of claim 28 wherein said new authenticated rights locker 
access request is embedded in a Web cookie. 

32. The program storage device of claim 28 wherein said new authenticated rights locker 
access request is encapsulated in an HTTP Response message. 

33. A program storage device readable by a machine, embodying a program of 
instructions executable by the machine to perform a method for digital content 
access control, the method comprising: 

receiving a first authenticated rights locker access request and a digital content 
specification; 

validating said first authenticated rights locker access request; and 
if said validating indicates said first authenticated rights locker access request is 
valid, 
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creating a Web page with one or more clickable links that comprise an 

authenticated digital content request for use in accessing digital content 
stored by a digital content repository; 

sending a second authenticated rights locker access request and said Web page; 

receiving and validating said second authenticated rights locker access request; 

obtaining an authenticated digital content request if said second authenticated 
rights locker access request is valid; and 

sending said authenticated digital content request to a digital content repository. 

34. The program storage device of claim 33 wherein at least part of said second 
authenticated rights locker access request is for storage in a bookmark on a user 
device. 

35. The program storage device of claim 33, further comprising embedding said second 
authenticated rights locker access request in a Web cookie before said sending. 

36. The program storage device of claim 33, further comprising encapsulating said 
second authenticated rights locker access request in an HTTP Response message 
before said sending. 

37. An apparatus for digital content access control, comprising: 

means for determining a digital content specification and associated authenticated 
rights locker access request; 
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means for sending said authenticated rights locker access request and said digital 

content specification; 
means for receiving a new authenticated rights locker access request and a Web page 

with one or more clickable links in response to said sending, at least one of said 

one or more clickable links associated with an authenticated digital content 

request; 

means for receiving an indication of a user selection of one of said one or more 
clickable links; 

means for sending an authenticated digital content request associated with said one 
of said one or more clickable links to a digital content repository; and 

means for receiving said digital content in response to said sending said 
authenticated digital content request. 

38. The apparatus of claim 37 wherein 

said apparatus further comprises means for determining one or more delivery 

parameters, said one or more delivery parameters indicating where said digital 
content should be sent, a delivery mechanism, or both; and 

said means for sending further comprises means for sending said one or more 
delivery parameters. 

39. The apparatus of claim 37, further comprising means for storing at least part of said 
new authenticated rights locker access request in a bookmark on a user device. 
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The apparatus of claim 37 wherein said new authenticated rights locker access 
request is embedded in a Web cookie. 



41. The apparatus of claim 37 wherein said new authenticated rights locker access 
request is encapsulated in an HTTP Response message. 

42. An apparatus for digital content access control, comprising: 

means for receiving an authenticated rights locker access request and a digital 

content specification; 
means for validating said authenticated rights locker access request; and 
means for if said validating indicates said authenticated rights locker access request 

is valid, 

creating a Web page with one or more clickable links that comprise an 

authenticated digital content request for use in accessing digital content 
stored by a digital content repository; and 

sending a new authenticated rights locker access request and said Web page. 

43. The apparatus of claim 42 wherein at least part of said new authenticated rights 
locker access request is for storage in a bookmark on a user device. 

44. The apparatus of claim 42, further comprising means for embedding said new 
authenticated rights locker access request in a Web cookie before said sending. 
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45. The apparatus of claim 42, further comprising means for encapsulating said new 
authenticated rights locker access request in an HTTP Response message before said 
sending. 

46. An apparatus for digital content access control, comprising: 

means for determining a digital content specification and associated authenticated 

rights locker access request; 
means for sending said authenticated rights locker access request and said digital 

content specification; 
means for receiving a new authenticated rights locker access request and a Web page 

with one or more clickable links in response to said sending, at least one of said 

one or more clickable links associated with an authenticated digital content 

request; 

means for receiving an indication of a user selection of one of said one or more 
clickable links; 

means for sending said new authenticated rights locker access request and an 
indication of the right associated with said one of said one or more clickable 
links to a rights locker provider; and 

means for receiving said digital content in response to said sending said new 
authenticated rights locker access request. 

47. The apparatus of claim 46 wherein 
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said apparatus further comprises means for determining one or more delivery 

parameters, said one or more delivery parameters indicating where said digital 
content should be sent, a delivery mechanism, or both; and 

said means for sending further comprises means for sending said one or more 
delivery parameters. 

48. The apparatus of claim 46, further comprising means for storing at least part of said 
new authenticated rights locker access request in a bookmark on a user device. 

49. The apparatus of claim 46 wherein said new authenticated rights locker access 
request is embedded in a Web cookie. 

50. The apparatus of claim 46 wherein said new authenticated rights locker access 
request is encapsulated in an HTTP Response message. 

51. An apparatus for digital content access control, comprising: 

means for receiving a first authenticated rights locker access request and a digital 

content specification; 
means for validating said first authenticated rights locker access request; and 
means for if said validating indicates said first authenticated rights locker access 

request is valid, 
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creating a Web page with one or more clickable links that comprise an 

authenticated digital content request for use in accessing digital content 
stored by a digital content repository; 

sending a second authenticated rights locker access request and said Web page; 

receiving and validating said second authenticated rights locker access request; 

obtaining an authenticated digital content request if said second authenticated 
rights locker access request is valid; and 

sending said authenticated digital content request to a digital content repository. 

52. The apparatus of claim 51 wherein at least part of said second authenticated rights 
locker access request is for storage in a bookmark on a user device. 

53. The apparatus of claim 51, further comprising means for embedding said second 
authenticated rights locker access request in a Web cookie before said sending. 

54. The apparatus of claim 51, further comprising means for encapsulating said second 
authenticated rights locker access request in an HTTP Response message before said 
sending. 

55. An apparatus for digital content access control, comprising: 
a memory for storing said digital content; and 

a processor configured to: 
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determine a digital content specification and associated authenticated rights locker 
access request; 

send said authenticated rights locker access request and said digital content 
specification; 

receive a new authenticated rights locker access request and a Web page with one 
or more clickable links in response to said sending, at least one of said one or 
more clickable links associated with an authenticated digital content request; 

receive an indication of a user selection of one of said one or more clickable links; 

send an authenticated digital content request associated with said one of said one 
or more clickable links to a digital content repository; and 

receive said digital content in response to said sending said authenticated digital 
content request. 

56. The apparatus of claim 55 wherein said processor is further configured to: 
determine one or more delivery parameters, said one or more delivery parameters 

indicating where said digital content should be sent, a delivery mechanism, or 
both; and . 
send said one or more delivery parameters. 

57. The apparatus of claim 55 wherein said apparatus comprises a smart card. 

58. The apparatus of claim 57 wherein said smart card comprises a Java Card™ 
technology-enabled smart card. 
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59. The apparatus of claim 57 wherein said smart card comprises a CDMA (Code 
Division Multiple Access) technology-enabled smart card. 

60. The apparatus of claim 57 wherein said smart card comprises a SIM (Subscriber 
Identity Module) card. 

61. The apparatus of claim 57 wherein said smart card comprises a WIM (Wireless 
Interface Module). 

62. The apparatus of claim 57 wherein said smart card comprises a USIM (Universal 
Subscriber Identity Module). 

63. The apparatus of claim 57 wherein said smart card comprises a UIM (User Identity 
Module). 

64. The apparatus of claim 57 wherein said smart card comprises a R-UIM (Removable 
User Identity Module). 

65. The apparatus of claim 55 wherein said processor is further configured to store at 
least part of said new authenticated rights locker access request in a bookmark on a 
user device. 
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The apparatus of claim 55 wherein said new authenticated rights locker access 
request is embedded in a Web cookie. 



67. The apparatus of claim 55 wherein said new authenticated rights locker access 
request is encapsulated in an HTTP Response message. 

68. An apparatus for digital content access control, comprising: 

a memory for storing one or more rights lockers that describe digital content access 

rights; and 
a processor configured to: 

receive an authenticated rights locker access request and a digital content 
specification; 

validate said authenticated rights locker access request; and 
if said validation indicates said authenticated rights locker access request is valid, 
create a Web page with one or more clickable links that comprise an 

authenticated digital content request for use in accessing digital content 
stored by a digital content repository; and 
send a new authenticated rights locker access request and said Web page. 

69. The apparatus of claim 68 wherein at least part of said new authenticated rights 
locker access request is for storage in a bookmark on a user device. 
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70. The apparatus of claim 68 wherein said processor is further configured to embed said 
new authenticated rights locker access request in a Web cookie before said sending. 

71. The apparatus of claim 68 wherein said processor is further configured to 
encapsulate said new authenticated rights locker access request in an HTTP 
Response message before said sending. 

72. An apparatus for digital content access control, comprising: 
a memory for storing said digital content; and 

a processor conf i gured to : 

determine a digital content specification and associated authenticated rights locker 
access request; 

send said authenticated rights locker access request and said digital content 
specification; 

receive a new authenticated rights locker access request and a Web page with one 
or more clickable links in response to said sending, at least one of said one or 
more clickable links associated with an authenticated digital content request; 

receive an indication of a user selection of one of said one or more clickable links; 

send said new authenticated rights locker access request and an indication of the 
right associated with said one of said one or more clickable links to a rights 
locker provider; and 

receive said digital content in response to said sending said new authenticated 
rights locker access request. 
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73. The apparatus of claim 72 wherein said processor is further configured to: 
determine one or more delivery parameters, said one or more delivery parameters 

indicating where said digital content should be sent, a delivery mechanism, or 
both; and 

send said one or more delivery parameters. 

74. The apparatus of claim 72 wherein said apparatus comprises a smart card. 

75. The apparatus of claim 74 wherein said smart card comprises a Java Card™ 
technology-enabled smart card. 

76. The apparatus of claim 74 wherein said smart card comprises a CDMA (Code 
Division Multiple Access) technology-enabled smart card. 

77. The apparatus of claim 74 wherein said smart card comprises a SIM (Subscriber 
Identity Module) card. 

78. The apparatus of claim 74 wherein said smart card comprises a WIM (Wireless 
Interface Module). 

79. The apparatus of claim 74 wherein said smart card comprises a USIM (Universal 
Subscriber Identity Module). 
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80. The apparatus of claim 74 wherein said smart card comprises a UIM (User Identity 
Module). 

, 81. The apparatus of claim 74 wherein said smart card comprises a R-UIM (Removable 
User Identity Module). 

82. The apparatus of claim 72 wherein said processor is further configured to store at 
least part of said new authenticated rights locker access request in a bookmark on a 
user device. 

83. The apparatus of claim 72 wherein said new authenticated rights locker access 
request is embedded in a Web cookie. 

84. The apparatus of claim 72 wherein said new authenticated rights locker access 
request is encapsulated in an HTTP Response message. 

85. An apparatus for digital content access control, comprising: 

a memory for storing one or more rights lockers that describe digital content access 

rights; and 
a processor configured to: 

receive a first authenticated rights locker access request and a digital content 
specification; 
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validate said first authenticated rights locker access request; and 
if said validation indicates said first authenticated rights locker access request is 
valid, 

create a Web page with one or more clickable links that comprise an 

authenticated digital content request for use in accessing digital content 
stored by a digital content repository; 

send a second authenticated rights locker access request and said Web page; 

receive and validating said second authenticated rights locker access request; 

obtain an authenticated digital content request if said second authenticated 
rights locker access request is valid; and 

send said authenticated digital content request to a digital content repository. 

86. The apparatus of claim 85 wherein at least part of said second authenticated rights 
locker access request is for storage in a bookmark on a user device. 

87. The apparatus of claim 85 wherein said processor is further configured to embed said 
second authenticated rights locker access request in a Web cookie before said 
sending. 

88. The apparatus of claim 85 wherein said processor is further configured to 
encapsulate said second authenticated rights locker access request in an HTTP 
Response message before said sending. 
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